BeyondInsight / Password Safe

Hello All,The AD fallback authentication mechanism is an essential feature for ensuring continuous access to resources, even when the primary authentication method (Kerberos) fails.I kindly ask you to create an official article that would explain in detail how the AD Fallback authentication mechanism works. Regards,Raja

The following articles were published last week. New Knowledge Base Articles: KB0021413 - How to create or customize email notifications KB0022015 - How to restrict users from viewing passwords when Password Safe and PRA are integrated KB0022136 - Scanner reporting Windows 2025 server as Windows server 2125

Hello community,I am working on creating a custom platform to model a Radaware Alteon Load Balancer platform. I already have all the necessary commands to perform the test and change the password; however, I am encountering an issue. The password change command used ( /c/sys/access/user/uid /pswd ) requires a UID instead of the managed user name. In traditional BeyondInsight/Passwordsafe SSH platforms, only the options for username and password are available, and there are no other alternatives such as UID.I would like to know if anyone has faced this challenge before, so they could guide me on how they were able to resolve it, or if they can provide any suggestions on how to perform the password change for this platform.Thank you in advance for your help.Best regards.

Hello All, We are planning for Beyond Trust Insight upgrade from older version of 23.2 to 24.X. Can someone help with stepwise documentation or any documents for this upgrade. What all preliminary activities needs to be done before upgrade and post upgrade activities? Thanks,Prasad

Hi Team,I have a query regarding web console login: "Can we use the same user account for both Web Console login and Server RDP (MA) login? If we do, what would be the potential impact?"I would appreciate a quick response on this matter.Thanks!

We are facing this error when trying to export the logs from appliance page. This KB is suggesting to restart the appliance monitoring service. I would like to know the impact of this service restart on production environment. Kindly suggest on it.

We recently rebooted the primary UVM server and since then the daily scans for discovering domain join servers are not working which is scheduled daily at night. Please suggest. 

HI Team, Could you please provide any one of here, pre-requisites for password safe cloud and SaaS based solution. To configure from scratch.

Hi Team,We are on a version 24.2.0, When I try to launch the ps_automate session from the cmd line, I’m getting the below prompt about msedgedriver but actual MS Edge Browser is not launched, but if you look into the log file, it shows that session has been started.ps_automate.exe ini="D:\Enhanced Session Utility\PS Automate\BIWebApp.ini" TargetURL="https://xxxxx.ps.beyondtrustcloud.com/WebConsole/index.html#!/dashboard" BrowserName="msedge" username=xxx password=xxxPlease check the below reply for detailed log. 

How to launch browser - without being in INCOGNITO or inprivate via ps automate ?

The following articles were published last week. New Knowledge Base Articles: KB0021664 - Login and Login Alert Cumulative mail templates are not sending any notifications KB0022091 - Unable to view active and completed sessions. Error - An error occurred while trying to fetch the session details KB0022111 - BeyondTrust Connector services failing consistently. Error -

Hi Team, I have a requirement to create a custom platform where with the below steps..1.Open putty enter hostname name 2.Enter username3.Accept Banner4.Enter Password As per the current Custom Platform we can only have 2 Groups in Steps1.After Login2.Error Handling And as per my understanding my requirement needs a before login Group. Let me know if anyone of you have got same case and by any chance you got it working or what could be the alternate ways.

Hello All,How do you handle use cases where admins need to manually enter the managed account password multiple times in a day. These can be Workstation admins helping end-users directly on end-user workstations and manual entry of passwords is required . As the password rotates very frequently and is complex to remember or type in what is your approach .We have a password manager that they can use on phone , so that they don’t need to carry their laptop or login to PS on end-user machine. We are exploring using Yubikeys or other device which can store partial password and admins can memorize a few characters. Yubikeys don’t allow to restrict storage based on number of characters  though,. 

Getting an error while testing the ps Automate INI file. When i try to open through Powershell/CMD prompt, getting the issue.It is coming for default BT given INI file also.   

Hi All , Thanks in advance for your input .i am trying to launch powershell_ise.exe as admin in managed application session but when i send subsequent command it doesn’t work, same task sequence works when powershell_ise.exe launch as normal window.following is my script block --------------------------[General]EnableLogging=4LogMethod=2LogPath="D:\Log";RunApp="powershell -Command "Start-Process PowerShell_ISE -Verb RunAs "RunApp="C:\Windows\system32\WindowsPowerShell\v1.0\powershell_ISE.exe";AppWindowTitle="Administrator: Windows PowerShell ISE"[TaskSequence1]SequenceDelay=40000Sendkeys=^i  Any suggestion? Regards,Maulik

Hello, We have one environment of BeyondTrust Insight with scanned accounts and managed accounts. We are planning to setup backup environment at different location with different domain. We wanted to export the accounts from environment 1 to this new one. Is there any way by which we can export those and re-import in other environment. Thanks,Prasad

Hi,I am currently developing a Custom Plugin for Oracle (versions 10 and 11). However, I have not been able to find examples of Custom Plugins specifically for databases that could serve as a reference.Could you provide me with an example or relevant documentation to help me build a solid foundation for development? I appreciate your support in advance.Best regards.

The following articles were published last week. New Knowledge Base Articles: KB0021816 - Password Safe Managed System cloud platform deprecation - Office 365 and Azure KB0022017 - Failed to established mirror for database: RetinaCSDatabase SQL Server returned: 'The server network address "TCP://:5022 KB0022057 - OAuth error when connecting to MMC policy editor - Fai

We have PRA and Password Safe integrated.When launching Web Jump for a host esxxx, credentials are not being pulled from the Password Safe. but for the same host esxxx, when launching SSH Jump, credentials are able to pull from Password Safe.Is there any additional settings has to enabled for Web Jump to pull credentials from Password Safe?  Credentials added to PRA Vault is working but not from Password Safe.

Hello Community,I have a platform that is a Radware load balancer. I would like to know if anyone has a custom SSH platform for this device that they could share with me.I would greatly appreciate your support.Thanks in advance!

Hello team,I have web applications configured in password-safe. When the end user takes a session, it injects credentials. I want to temporarily block mouse and keypad control over applications during credential injection. Once user log-in completes, it should enable the end user to perform further activity.Any suggestions to achieve this use case will be appreciated. Thank you.

Hello All,I am looking for some information about discovery scan configuration.How do we setup scan agent and how its shown in list as to select for scanning? Thanks,Prasad

Hi,Is there a way to include a body tag which is not available in the description of that template but is available for other template. For Release Request Access Policy mail template, we want to include the Reason in the email. But available body tags does not have “ :RequestReason:”In other mail template it is available. The form captures it that means it is being recorded somewhere. Is there any way to include the reason in “Release Request Access Policy” mail template

Hello Everyone,I was looking for reference to enable domain login for BeyondInsight. (like screen below). We have directory credentials account working fine. I tried by creating new domain in domain management but still I could only see UserName and Password field on login screen. I am looking for that third field “Log in to” with domain name in that as option.  

I need a PowerShell script which will set the password on managed system once the managed account password is rotated by functional account as per password policy in PasswordSafe. I think it’s possible through propagation features but don’t know how to do. Can anyone please help me on this?